
<amp-img src="/blog-content/september-2021/33/twitter-privacy.jpg" layout="responsive" width="2000" height="1500" alt="twitter-privacy">
</amp-img>
<img src="/blog-content/september-2021/33/twitter-privacy.jpg" layout="responsive" width="2000" height="1500" alt="twitter-privacy">
</img>

In one of our recent articles regarding [oversharing information online](https://redact.dev/blog/oversharing-self-inflected-danger), there was a brief but important nod towards the ways that social media platforms contribute to you oversharing your details. In an effort to prevent this, this article will be focusing on disabling certain features on Twitter that publicize critical information. 

## How to Disable Locations Tags

Exposing your location to the online world is very dangerous. Depending on where you post from, you could unintentionally hand over vital information to scoundrels. For instance, if you tweet while you’re away from home, that is an invitation to an unwanted visitor. While Twitter states that [Tweet location is off by default](https://help.twitter.com/en/safety-and-security/tweet-location-settings), it’s still important to verify this for yourself. It’s better to be safe than sorry. 

Unfortunately, there is currently no option to disable Tweet location on desktop, but it can be done through the mobile application. In order to disable Tweet location tags on your Apple or Android device, follow these steps:

1.	Tap the Tweet compose icon.

2.	Press the location icon, highlighted here in yellow

<amp-img src="/blog-content/september-2021/33/location-icon.jpg" layout="responsive" width="609" height="810" alt="location-icon">
</amp-img>
<img src="/blog-content/september-2021/33/location-icon.jpg" layout="responsive" width="609" height="810" alt="location-icon">
</img>

3.	If you have Tweet location enabled, your location should be highlighted. To disable it and remove your location, press the X in the top-left corner.

## How to Remove Your Birth Date

Your date of birth is one of the most important pieces of information that should be kept private. While seeing confetti drop and balloons rise on Twitter during your birthday is certainly pleasant, the amount of harm that can be done with just this bit of information is astonishing. For example, a type of cybercriminal often referred to as a “[social engineer](https://redact.dev/blog/social-engineering-the-silent-killer),” could use it to pretend to be you and potentially hijack one of your accounts. While the consequences of leaving your date of birth public can be destructive, the steps to remove it are extremely easy.

To remove your birthday on either a web browser or the Twitter app, follow these steps:

1.	Go to your profile, then click or tap on the Edit Profile button. 
<amp-img src="/blog-content/september-2021/33/edit-profile.jpg" layout="responsive" width="828" height="321" alt="edit-profile">
</amp-img>
<img src="/blog-content/september-2021/33/edit-profile.jpg" layout="responsive" width="828" height="321" alt="edit-profile">
</img>

2. If you are using the Web version, click Edit next to Birth date. If you are on mobile, tap Birth date.

3. At the bottom of the screen, click Remove birth date, then confirm by clicking Remove.

<amp-img src="/blog-content/september-2021/33/remove-birth-date.jpg" layout="responsive" width="969" height="910" alt="remove-birth-date">
</amp-img>
<img src="/blog-content/september-2021/33/remove-birth-date.jpg" layout="responsive" width="969" height="910" alt="remove-birth-date">
</img>

4.	Press Save when finished.

## How to Hide Your Birth Date

If you do not want to entirely remove your date of birth, there is still a way for you hide it from certain users. To change the visibility of your birthday on Twitter through either a web browser or the mobile application, follow these steps:

1.	Go to your profile, then click or tap the Edit Profile button, as shown previously.

2.	Next to Birth date, click Edit. If you are on mobile, tap Birth date.

3.	Change the visibility of your date of birth to Only you underneath Who sees this?

4.	Press Save when finished.


How to Increase your Privacy on Twitter


<amp-img src="/blog-content/september-2021/32/password-hacking.jpg" layout="responsive" width="2000" height="1335" alt="password-hacking">
</amp-img>
<img src="/blog-content/september-2021/32/password-hacking.jpg" layout="responsive" width="2000" height="1335" alt="password-hacking">
</img>

Brute force attacks are the simplest way of breaking into somebody’s account. They’re able to be used against anything protected by a password, and many websites and services don’t have proper protection against them. Here’s a breakdown of the basic step-by-step process.

1.	Identify the minimum number of characters for a password
2.	Guess every single possible combination of characters
3.	Add another character if unsuccessful 
4.	Return to step 2 until successful

## Why would somebody want to do a brute force attack?

There are lots of different things protected by passwords; any of these are fair game for brute force attacks. The computational simplicity of the algorithms makes them an attractive option for both small time hackers, and industrial large-scale operations. Here's a small list of vulnerable accounts that you could have right now:

-	Bank Accounts
-	Social Media Accounts
-	Website Admin Profiles
-	Email Address
-	Work or School Account

If any of these were to be compromised, the damage could be catastrophic. Malicious actors could take your money, shut down your website, hijack your online presence, destroy your personal or professional life, or get you suspended from school. While some of these are more immediately beneficial than others, all of them are likely outcomes if you become compromised. 

## How to protect against brute force attacks

This is a very serious threat to consider; however, you can easily protect yourself with a few, simple practices. To prevent your accounts from being compromised in this kind of attack, you need to have [more than one factor](https://redact.dev/blog/what-is-two-factor-authentication)  protecting every profile (no matter how trivial), and you need to have [strong passwords](https://redact.dev/blog/why-is-having-a-strong-password-so-important), and a [different password](https://redact.dev/blog/top-password-managers-in-2021) for every account. 

In the near future, we plan on outlining not only more threats that you face, but also the most effective way at combating them. We here at Redact believe strongly that privacy is one of our most important rights, and we want to make sure that you’re as safe as possible. 


What is a Brute Force Attack?


<amp-img src="/blog-content/august-2021/17/privacy.jpg" layout="responsive" width="1200" height="900" alt="doxxing">
</amp-img>
<img src="/blog-content/august-2021/17/privacy.jpg" layout="responsive" width="1200" height="900" alt="doxxing">
</img>

Picture this: you just finished playing a video game online, leaving the enemy team completely devastated. While you are patting yourself on the back and admiring your victory, you suddenly lose connection to the game. In fact, you lose Internet connection on everything: your cell phone, your game consoles, and your desktop. Now that you think about it, you can recall someone in your game that was extremely frustrated, particularly at you.

In this scenario, you may have been the victim of a denial-of-service attack.

## What is a Denial-of-Service Attack?

Denial-of-service attacks are a method that malefactors and miscreants online utilize in order to shut down a targeted person or server through the target’s IP address. This can happen through two, distinct variations; a Denial-of-Service (DoS) attack, or a Distributed Denial-of-Service (DDoS) attack. While both share the same outcome, the difference lies in the execution.

## DoS vs. DDoS Attacks

In short, DoS and DDoS attacks send unwanted traffic in the form of “packets” over to the targeted network. While both DoS and DDoS attacks have dire consequences, the former is much easier to quash than the latter. This is primarily the case since DoS attacks come from a single computer. More specifically, only a limited number of packets can be sent at a single time, making the attack much weaker. Additionally, since DoS attacks are orchestrated from a single device, it makes it much easier for the victim to determine where the attack is coming from and stop it. A DDoS attack, on the other hand, makes resistance extremely challenging.

DDoS attacks come from multiple computers at once, thus amplifying the number of packets being sent at once while simultaneously making it significantly more difficult to detect the source of the attack. In other words, DDoS attacks are like heavy artillery. They can be used to shut down entire servers, as opposed to a single person’s Internet connection. This means that the consequences of a DDoS attack can be very costly. In fact, [a security survey](https://www.coxblue.com/12-ddos-statistics-that-should-concern-business-leaders/) found that the cost of a DDoS attack can average between $20,000 to $40,000 per hour while shut down.

### Takeaways

Overall, denial-of-service attacks should be taken very seriously, as they have the capacity to render the victim completely useless. Whether you are a single person or an enterprise, you should prepare yourself for such an event. Fortunately for you, there are some preventative measures that you can take, and we at Redact will discuss that more in the near future!


What are DoS and DDoS Attacks?


<amp-img src="/blog-content/september-2021/31/facebook.jpg" layout="responsive" width="2000" height="1333" alt="facebook">
</amp-img>
<img src="/blog-content/september-2021/31/facebook.jpg" layout="responsive" width="2000" height="1333" alt="facebook">
</img>

It’s widely known that [Facebook collects information about its users](https://www.nytimes.com/2018/04/11/technology/facebook-privacy-hearings.html). Most people seem to be at least tangentially aware that this either is actively happening, or has happened in the past. For many, the details end there. We want to take a look at not only what Facebook does with all this data, but what data they collect in the first place.

## What information are they actually collecting?

Facebook gathers lots of information from a variety of sources. Here’s a small list, and some explanation for the more vague ones.

-	Cookies
-	Facial Recognition
-	Behavioral Data
-	Personal Data

“Behavioral Data” has to do with what you like, how long you engage with content, what’s more likely to cause you to leave a comment, etc.. They collect this information based on how you act on the site.

“Personal Data” has to do with information about you. This includes your location, age, name, etc.. In most cases, this is information that you freely give Facebook as opposed to it being collected subliminally. 

## How are they using this information?

This level of data harvesting may sound scary, but it doesn’t answer what the salient threat actually is. One issue on this front is that we don’t actually know with perfect certainty what Facebook does, and we can only get hints based on what they tell us, and what they’ve been caught doing in the past. Here’s a list of three items, accompanied by some analysis. 

### Turned over to the government

This likely only applies in certain circumstances, namely, to those engaged in criminal activity; however, this doesn’t excuse this behavior. Facebook has no right to abuse its power over the people who depend on it for communication, and your privacy should absolutely matter under all circumstances. 

### Sold to the highest bidder

Facebook has been caught in scandals in the past for monetarily collaborating with third parties to disclose your personal information. Most famously, they were impugned for their involvement with Cambridge Analytica, a shady political firm. 

### Experimented on internally

Finally, your information is collected and researched internally. Whenever you see a news story with a headline like, “Study finds Facebook users xyz,” this information is gathered subliminally by Facebook. In some cases, this information is given to researchers, but this is primarily internal research. 

## What can you do to stop Facebook from abusing your information?

We plan on writing about all the different steps you can take to minimize Facebook’s grasp over your data; however, the biggest first step you need to take is to remove harmful information you’ve posted in the past. 

Facebook is able to deduce a shocking amount about your life based on inferences they make from your posts and activity, and deleting those posts will get rid of this vault of knowledge. Redact does this in a matter of seconds, and is free to boot. To start today, go to redact.dev/download to start your path to true privacy. 


What does Facebook do with your data?


<amp-img src="/blog-content/september-2021/30/password-manager.jpg" layout="responsive" width="2000" height="1333" alt="password-manager">
</amp-img>
<img src="/blog-content/september-2021/30/password-manager.jpg" layout="responsive" width="2000" height="1333" alt="password-manager">
</img>

Passwords are the first line of defense between a cybercriminal and your accounts. Having a weak password greatly increases the risk of your accounts being compromised, resulting in your personal information (your phone number or bank account) being exposed. While there are ways that you can strengthen your password to immensely mitigate this risk, as expressed in one of our [previous articles](https://redact.dev/blog/why-is-having-a-strong-password-so-important), keeping track of more complex passwords can be difficult. Fortunately for you, this is exactly what password managers excel at.

Password managers, while having a great amount of utility, share the same challenge as all other products in existence: competitors. With a plethora of clashing software, all claiming to be superior to the others, how could you possibly determine which is right for you? In order to make this decision as easy as possible for you, we have compiled a list (in no particular order) of password managers, along with their respective strengths and weaknesses.

## 1Password
1Password is one of the most recognizable password managers on the market. Part of this recognition comes from its outstanding reviews on sites such as Trustpilot. 1Password offers two options for personal use; a $2.99 a month option for one individual, and a $4.99 option able to be shared among 5 people. There are also options for businesses, starting at $7.99 a month.

### Pros

- Supports Two-Factor Authentication
- Accessible on numerous platforms (MacOS, Windows, Linux)
- Accessible on mobile applications (iOS and Android)
- Can generate more memorable passwords (full words instead of just random characters)
- Has a “Travel Mode” when going across borders

### Cons

- No free plan available
- User interface is a bit outdated
- Comes with only 1 GB of document storage

## Keeper

In comparison to other paid password managers, Keeper proves itself to be a worthy adversary. While it is not free, Keeper provides a wide array of options for customers to choose from according to their needs. If you want it for personal use, you can pay $2.91 per month, or if you are looking to use it for your business, you can pay $3.75 per month. In addition to this, one of the most exceptional features is the fact that students are given 50% off a personal use plan.

### Pros

- Supports Two-Factor Authentication
- Accessible from numerous devices
- Easy-to-navigate user interface
- Fingerprint & Face ID login
- Provides 24/7 customer support
- Has Dark Web monitoring

### Cons

- No free plan available
- Premium services can be costly

## Bitwarden

Unlike the aforementioned password managers, Bitwarden does not instantly put a price on your safety. Instead, Bitwarden offers an entirely free service for personal use. It includes your own, personal “vault” to generate, save, and access unique passwords at any time from practically any device, whether it be on their mobile application or on your desktop.

### Pros

- Free for personal use
- Unlimited storage for passwords
- Supports Two-Factor Authentication
- Keeps track of password history
- Checks to see if any password generated was discovered in recent data breaches
- Compatible with many platforms (MacOS, Windows, Linux)
- Accessible through browsers (Chrome, Firefox, Safari, etc.)
- Has a mobile application (iOS and Android)

### Cons

- Does not have live chat or phone support
- User interface is a bit hard to navigate

While all these password managers are great, Keeper seems to provide a lot of extra features at a relatively lower cost than other paid password managers. Unique features like dark web monitoring and fingerprint / face recognition logins, paired with low-cost options (e.g., the student plan) are certainly what give Keeper an edge on their competitors. However, Bitwarden provides a completely free service for personal use that goes above some aspects of the premium services. For example, while 1Password only stores your deleted passwords for 365 days, Bitwarden will keep track of your password history permanently


The Top Password Managers in 2021


<amp-img src="/blog-content/september-2021/29/vpn.jpg" layout="responsive" width="2000" height="1298" alt="vpn">
</amp-img>
<img src="/blog-content/september-2021/29/vpn.jpg" layout="responsive" width="2000" height="1298" alt="vpn">
</img>

Recently, [we wrote about](https://redact.dev/blog/what-are-vpns-and-what-are-they-useful-for) what VPNs are, and some of their pros and cons. While this is all wonderful information, it doesn’t really help you decide which specific service to choose. There are literally hundreds of competing companies that claim to offer the same product, so which ones are the best?

Here’s a list of our 4 favorite VPN services in no particular order, along with their relative strengths and weaknesses to one another.

## Express VPN

At $2.95 a month, ExpressVPN offers the basic suite of VPN services. They’ll encrypt your data, allow you to access location gated content, and not even sacrifice your lightning fast speeds. They claim to operate out of 160 locations in 94 different countries, and to have “unlimited bandwidth.” But what are their true strengths and weaknesses?

### Pros

Express VPN has some of the best speeds of any VPN service, in addition to providing some of the more secure encryption. This killer combo is further sweetened by their diversity of servers, allowing you to skip around and access content from almost anywhere in the world. 

### Cons

The only cons worth mentioning are Express VPN’s price, and their lack of a solution to ad blocking. Otherwise, they’re a standout option. 

## Nord VPN

Nord VPN undoubtedly has the largest ad campaign of these options, and as a result, the most brand recognition. They boast rapid speeds, secure encryption, diverse server locations, and an intuitive UI. That being said, does it meet expectations? 

### Pros

In short, yes. Nord VPN is top in the line in terms of security, encryption, features, speed, and transparency. All of this is wrapped up in a lovely 11.95$ per month plan, a full dollar cheaper than Express VPN (wow!)

### Cons

The only cons to speak of are related to the platforms it supports. It’s not nearly as comprehensive as Express VPN in terms of being accessible from different browsers, operating systems, etc.. Additionally, the pricing options are a little rigid, but this is dampened by the volume of YouTube sponsor codes.

## Proton VPN

Proton VPN stands out by marketing itself as the affordable alternative to its flashier, sexier competitors. While they’re off fighting to offer the most features, the most servers, the best encryption, they’re gunning for the market who’s not quite set on reaching for their wallet. That raises the question, how successful are they in this quest?

### Pros

In terms of the most noticeable effects Proton will have on your day-to-day operations, they excel. They have very fast speeds, and a perfectly serviceable number of locations. Combined with the reasonable price point of 0 dollars a month, Proton VPN is immediately an attractive option.

### Cons

Sacrifices must be made, though. Proton VPN lags behind the others in terms of encryption and how many platforms it supports. Additionally, you may find yourself unable to access truly niche content depending on what you’re interested in, even though the vast majority of users are well serviced by its repertoire. 

## Surfshark

Finally, Surfshark swims onto the scene. In addition to offering a fully functional VPN, they also provide a bevy of additional privacy features, including “scans” for your ID, Credit Cards, and email addresses. We won’t be looking at these options today, but they’re worth considering as we talk about how they compare. 

### Pros

The best thing to be said is the number of platforms (browsers, operate systems, etc) that they offer their protection too. Their speeds are perfectly serviceable, and their encryption is top tier. Additionally, they offer their services at 2.49 a month; however, it’s billed in two year chunks. 

### Cons

That being said, they’re sort of a jack of all trades master of none. You get a lot of bang for your buck, but you aren’t getting the most transparent, fastest, most accessible VPN. With these drawbacks in mind, if you want a wider array of features than just a VPN, this is a wonderful option.  


The Top 4 VPNs in 2021


<amp-img src="/blog-content/september-2021/28/oversharing.jpg" layout="responsive" width="2000" height="1333" alt="oversharing">
</amp-img>
<img src="/blog-content/september-2021/28/oversharing.jpg" layout="responsive" width="2000" height="1333" alt="oversharing.jpg">
</img>

When protecting both your privacy and online accounts, you are your own best defense. You determine the [length and complexity of each password](https://redact.dev/blog/why-is-having-a-strong-password-so-important), as well as which extra security measurements to opt-into, such as [Two-Factor Authentication](https://redact.dev/blog/what-is-two-factor-authentication). While these are all phenomenal ways to protect yourself from malefactors, people often overlook something excruciatingly important: their mannerisms on social media.

## The Scope of Your Information on Social Media

As expressed in [one of our previous articles](https://redact.dev/blog/the-power-of-the-send-button), the “send” button on social media generates an immense outreach. Your information immediately becomes accessible to millions of people, one of which that could potentially be your undoing. This is why it is crucial for users to post safely, as even the most arbitrary piece of information could be extremely valuable to a cybercriminal.

## What is Oversharing?

The definition of “oversharing” is rather self-evident - it is simply disclosing too much information. Whether it be a post with your pet’s name, a picture at your favorite local coffee shop, or details about an upcoming vacation, these all come with a level of risk. Your pet’s name could be linked to one of your passwords, the post at your local coffee shop could give away your location to strangers, and a post about an upcoming trip out-of-town could be an unintended invitation for a burglar to break into your home while you are away. 

There are also features on the social media platforms themselves that could be detrimental to keeping your online presence safe. Certain components of these sites, such as Twitter, often provide information to the public that you might not necessarily want out there. For example, posts made on certain platforms can have tags, or “geolocators,” underneath them that disclose where the post was created. There are also “fun” features that go unnoticed, like your birthday. While it is nice to receive birthday wishes, your date-of-birth is critical information to cybercriminals looking to breach your accounts, as they are often tied to passwords or security questions.

## How to Protect Yourself from Oversharing

If you are just learning about oversharing and the immense risk that comes with it, you may be wondering how you could protect yourself. Fear not - preventing oversharing only takes a few steps! Here are some great ways for you to prevent accidentally doing it in the future:

- Make your social media profiles private
- Avoid posting personal details
- Be mindful of what you are posting before you press “send”
- Disable location-based settings on social media platforms

While these are good measures to prevent oversharing in the future, posts from your past that could be oversharing your information are still out there. Now, you may think to yourself “How do I go back to delete hundreds, maybe thousands of posts? That’s too much time and effort!” Fortunately for you, Redact can get this done with ease. Whether it be a post you made a day ago or a year ago, Redact can go back and remove them from the public’s eye, ridding the threat of oversharing. You can get started for free today by downloading Redact for Windows, MacOS, or Linux at [redact.dev/download](redact.dev/download). 


Oversharing: A Self Inflicted Danger


<amp-img src="/blog-content/september-2021/27/two-factors.jpg" layout="responsive" width="3000" height="2003" alt="twitter-privacy">
</amp-img>
<img src="/blog-content/september-2021/27/two-factors.jpg" layout="responsive" width="3000" height="2003" alt="twitter-privacy">
</img>

It’s increasingly popular to see two-factor authentication be the norm for many users across all social media platforms. This is because it’s so incredibly effective at keeping your accounts secure in addition to being relatively easy to enable. That raises the question though, what is a “factor,” what does it mean to have two of them, and why is it so effective?

### Factors and Authentication

Whenever you want to access information on a computer, it’s become common practice to prove in some way that you have the proper credentials and clearance to get in. This applies equally to your personal, private messages and classified documents in a top-secret government database. The process of proving your identity is called “Authentication.”

Authentication requires any individual to provide one of the following pieces of proof, called “Factors.”

- Something the user has
- Something the user knows
- Something the user is
- Somewhere the user is

Most commonly, people use the factor “something the user knows” in the [form of a password](https://redact.dev/blog/why-is-having-a-strong-password-so-important) to authenticate their identity. It’s also common to see people use biometrics (something the user is) or even physical keys (something the user has.)

### Multi-Factor Authentication

Any individual factor by itself can be easily compromised. Keys can be stolen or faked, locations can be duped or trespassed on, information can be stolen or guessed, and even your identity can be stolen. With this in mind, it’s a good idea to employ more than one factor to ensure maximal security.

For example, let’s imagine that before you log into your Facebook account, you have to provide a password in addition to a confirmation code delivered to your phone number. This is an example of two-factor authentication, where one factor is “something that you know,” and the other is “something that you have.” Alternatively, you could require a password in addition to a fingerprint scan.

### Relevance to you

Whatever your preferred factor, you’re limited by convention. Most social media platforms will have an option to enable two-factor authentication, but it’s almost always limited to connecting your phone number to your account.

If you take 5 minutes out of your day to set this up, it increases the difficulty of breaking into your account dramatically. After all, how likely is it that a malicious actor will have access to both your physical phone and your password?

It may seem inconvenient, but the benefits are immeasurable. You should absolutely enable two-factor authentication on as many social media platforms as possible as soon as possible.


Our cat diaries

How to Increase your Privacy on Twitter • 2021-09-10

What is a Brute Force Attack? • 2021-09-09

What are DoS and DDoS Attacks? • 2021-09-08

What does Facebook do with your data? • 2021-09-07

The Top Password Managers in 2021 • 2021-09-06

The Top 4 VPNs in 2021 • 2021-09-05

Oversharing: A Self Inflicted Danger • 2021-09-04

What is Two-Factor Authentication, and why is it important? • 2021-09-03